CVE-2026-98376

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When replacing an inner per-CPU array map within a map-in-map structure, the kernel fails to verify that the replacement map matches the size of the original template map. A local attacker can exploit this flaw by...

CVE-2023-20564

CVE-2023-20564 - PoC de Acceso a Memoria Física del Driver AMD Ryzen Master Resumen Este repositorio contiene una Prueba de Concepto PoC que demuestra la vulnerabilidad CVE-2023-20564 en el Driver AMD Ryzen Master. La vulnerabilidad permite a usuarios no privilegiados leer y escribir memoria físi...

CVE-2019-16098

CVE-2019-16098 El controlador en Micro-Star MSI Afterburner 4.6.2.15658 también conocido como RTCore64.sys y RTCore32.sys permite que cualquier usuario autenticado lea y escriba en memoria arbitraria, puertos de E/S y MSRs. Esto puede ser explotado para escalada de privilegios, ejecución de códig...

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – eBPF Verifier Type Confusion → Kernel Memory Read/Write Overview A subtle integer overflow in the eBPF verifier’s bounds tracking allows an attacker to craft an eBPF program that accesses out‑of‑bounds kernel memory. Severity: Critical Kernel Privilege Escalation User‑mode eBPF...

CVE-2022-22077

✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...

KslDump

KslDump - BMVD Traiga el Controlador Vulnerable de Microsoft Contexto importante Reporté el problema a Microsoft el 7 de marzo de 2026. Sin embargo, casi 20 días antes, la comunidad de modding de juegos ya lo había invertido y discutido públicamente. Por mi parte, no sigo sus proyectos y no estab...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC PoC exploit for HP Hardware Diagnostic's EtdSupp driver CVE-2023-32673/PSR-2022-0209 Building Open in Visual Studio 2019 Build in release Admire or don't Summary Pretty simple little driver with virtual memory r/w, no MmMapIoSpace, etc. Disclaimer Diet soda is disgusting...

Centry

Centry WARNING: THIS IS EXPERIMENTAL SOFTWARE. IT IS LIKELY TO CONTAIN BUGS. Updates If you have already installed Centry, please run git pull to update to the latest version. The latest updates make it much more secure against replay attacks. Introduction Centry is a panic button intended to...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Lectura/escritura arbitraria de memoria física y puertos de E/S a través del controlador ThrottleStop ThrottleStop es una pequeña aplicación legítima utilizada para monitorear y corregir la limitación de la CPU. Tiene un controlador que facilita estas tareas y, en ...

kur

kur A code simply offers the ability to kernel-mode read / write memory from user-mode using vulnerable signed driver. It's simply utilizing MmCopyVirtualMemory, which is undocumented yet one of the most common API, in kernel mode so you can read / write any user-mode memory without having to wor...

CVE-2026-98203

A flaw was found in the Linux kernel's SoC System on Chip button array driver. The driver fails to verify that the button descriptor package contains entries before accessing them during device initialization. This issue may allow an invalid device configuration to trigger an out-of-bounds memory...

CVE-2026-98272

A flaw was found in the Linux kernel's Marvell mvpp2 network driver. This vulnerability can lead to a Denial of Service DoS due to an out-of-bounds memory access. A local user with network configuration privileges can trigger this issue by altering the Maximum Transmission Unit MTU, which causes...

Stryker

Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...

CVE-2021-21551

CVE-2021-21551 PoC simple para explotar CVE-2021-21551 para LPE ejecutando cmd del sistema. https://vulners.com/cve/CVE-2021-21551 Se descubrió un problema en el controlador firmado de Dell para Windows dbutil23.sys que puede llevar al compromiso de todo el sistema local. La rutina de despacho de...

CVE-2026-107726

Hazelcast is vulnerable to an arbitrary memory access flaw in versions prior to 5.4.5, 5.5.10, 5.6.1, and 5.7.0 . The root cause is improper validation of data supplied by a malicious client capable of connecting to a cluster. An attacker can perform arbitrary reads from a cluster member's Java h...

CVE-2026-107726 Hazelcast: Arbitrary member memory access by low-privileged client

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, an...

CVE-2026-107726 Hazelcast: Arbitrary member memory access by low-privileged client

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, an...

CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - Unauthenticated Kernel Memory Read/Write via Debug ioctls CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Discoverer : Daniil Gordeev Disclosed : 2026-05-03 Summary The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x out-of-tree "Jungle SDK"...

CVE-2025-27840-WIP

CVE-2025-27840-WIP A Work-In-Progress for CVE-2025-27840 CVE-2025-27840 Overview CVE-2025-27840 is a medium-severity vulnerability CVSS 6.8 affecting Espressif ESP32 Bluetooth chips , which are integrated into over 1 billion IoT devices globally. The flaw involves 29 undocumented Host Controller...